$ rpki-client -vvvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: Px4EJvfkzy9K7wvJ8rIv+Zs4gx35DbqFV0P6xjVOamk= Subject key identifier: 0F:EC:7E:18:DB:D8:A5:89:BE:4D:54:61:B8:40:88:50:79:FB:EE:B9 Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 0647 Signing time: Mon 31 Aug 2026 22:42:18 +0000 Manifest this update: Mon 31 Aug 2026 22:42:17 +0000 Manifest next update: Mon 07 Sep 2026 22:42:17 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: qQ1h77e0NXKg5PL4/Zzp4KEYIFQ7WwAAsHH8OZUApsE=) 2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: 5K9Nb9oqanLKhMwsnvMrdGufTZkwndyIvoG3/XPKP8U=) 3: izX6cF0_MJe1HjdZz6cbGZZvpcg.asa (hash: oXiVP+5cpTqEs79iRUts0PruOL4rv1VebzMA7ukfCxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 22:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Aug 31 22:42:17 2026 GMT Not After : Sep 7 22:42:17 2026 GMT Subject: CN=6a96034a-f2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e5:58:a2:cf:52:9e:62:13:14:38:f6:a2:1c: e0:3c:0f:75:ce:2d:f5:43:c4:4e:3f:42:b5:6a:8a: bd:1b:60:6e:19:c2:7d:69:ce:0f:47:fd:f1:96:51: b6:f7:04:d1:bb:d2:c0:a0:f9:69:6d:38:71:d6:8b: a4:a0:a3:22:75:6d:a4:11:e9:91:a0:02:4a:6e:dc: ec:9b:e0:8d:a3:f7:00:4b:1a:8c:17:b2:d2:18:53: d8:ab:db:6b:57:06:0b:c4:f2:d0:62:66:15:10:42: 1a:6c:0f:4e:3f:b1:4d:bf:31:b6:b2:b2:a6:00:51: 25:67:bc:2a:bc:19:13:67:a0:77:28:bf:d6:c9:86: 92:4a:6b:02:fc:6b:ac:ae:85:4e:f2:f6:07:63:46: b3:f3:fa:dd:0a:b2:a5:cf:1b:b1:f1:0b:5a:eb:4b: cf:10:95:e6:72:28:62:b3:d2:bb:bc:47:77:0c:28: ce:09:2b:04:4a:0e:49:41:7a:95:f6:c8:32:96:d1: 96:d0:f4:01:cd:6d:49:c1:f8:89:fb:10:f0:e5:c9: c9:d9:d3:77:67:d2:69:71:f1:39:92:5b:7d:a9:0f: 58:10:84:8f:51:2b:95:06:6c:16:f8:f5:98:17:81: 6c:eb:61:f1:df:08:bf:9e:3e:4e:a1:84:38:ec:a5: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EC:7E:18:DB:D8:A5:89:BE:4D:54:61:B8:40:88:50:79:FB:EE:B9 X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:fd:24:bd:65:54:aa:6b:96:fe:75:a6:5c:a7:5e:59:4f:d5: 2a:8c:b3:9f:d8:a6:25:65:7d:67:6a:dc:54:69:d3:2f:3b:ce: 72:15:b2:50:a8:59:9e:06:0f:74:1e:80:48:4a:98:aa:c1:c7: 10:4b:da:8e:eb:0a:65:9c:26:ad:62:c0:93:b9:b1:f3:aa:d2: 1a:2e:be:91:5c:15:f9:56:86:88:ab:df:27:0b:7e:7d:02:09: 0c:50:c0:63:88:18:6c:d6:d8:2b:2a:b8:2c:41:a2:95:00:09: 6d:bd:13:5d:2c:8b:9e:42:99:45:22:b1:08:5d:1c:60:c7:76: fa:a0:ab:e0:7c:75:23:1b:7e:27:60:e5:38:60:9a:c9:6f:36: 7a:43:f0:1a:4d:00:1f:6f:6c:ac:70:85:b6:72:32:0c:db:4d: b2:72:bb:b7:bf:9a:9b:36:42:ee:da:ef:cf:39:f7:cd:10:04: 52:d3:79:00:6e:77:1a:15:04:ca:0e:84:6e:33:13:e2:f5:1d: b4:3b:1f:9b:5e:e5:76:c1:69:9c:7d:4d:88:a1:f1:4e:26:88: 8c:ab:45:2c:ba:f5:da:da:e5:5a:76:c3:25:68:35:51:61:16: 2b:2d:80:67:6f:85:63:4a:d8:29:1b:6a:43:c8:4b:ba:07:2c: ac:6b:fe:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjYwODMxMjI0MjE3WhcNMjYwOTA3MjI0MjE3WjAYMRYwFAYD VQQDEw02YTk2MDM0YS1mMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5eVYos9SnmITFDj2ohzgPA91zi31Q8ROP0K1aoq9G2BuGcJ9ac4PR/3xllG2 9wTRu9LAoPlpbThx1oukoKMidW2kEemRoAJKbtzsm+CNo/cASxqMF7LSGFPYq9tr VwYLxPLQYmYVEEIabA9OP7FNvzG2srKmAFElZ7wqvBkTZ6B3KL/WyYaSSmsC/Gus roVO8vYHY0az8/rdCrKlzxux8Qta60vPEJXmcihis9K7vEd3DCjOCSsESg5JQXqV 9sgyltGW0PQBzW1JwfiJ+xDw5cnJ2dN3Z9JpcfE5klt9qQ9YEISPUSuVBmwW+PWY F4Fs62Hx3wi/nj5OoYQ47KXrTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/sfhjb 2KWJvk1UYbhAiFB5++65MB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqv0kvWVUqmuW/nWmXKdeWU/VKoyzn9imJWV9Z2rcVGnTLzvOchWyUKhZngYP dB6ASEqYqsHHEEvajusKZZwmrWLAk7mx86rSGi6+kVwV+VaGiKvfJwt+fQIJDFDA Y4gYbNbYKyq4LEGilQAJbb0TXSyLnkKZRSKxCF0cYMd2+qCr4Hx1Ixt+J2DlOGCa yW82ekPwGk0AH29srHCFtnIyDNtNsnK7t7+amzZC7trvzzn3zRAEUtN5AG53GhUE yg6EbjMT4vUdtDsfm17ldsFpnH1NiKHxTiaIjKtFLLr12trlWnbDJWg1UWEWKy2A Z2+FY0rYKRtqQ8hLugcsrGv+Gw== -----END CERTIFICATE-----Generated at Tue Sep 1 05:04:47 2026 by rpki-client